$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d971a8-f6ad-3e6a-84b5-158e463c2fa2.roa File: f8d971a8-f6ad-3e6a-84b5-158e463c2fa2.roa (raw, json) Hash identifier: o1/W674JfccsbP7Fc+CuS96QdbMmP1Oyso5KioQCL6s= Subject key identifier: 53:C5:23:24:7A:1E:31:2E:A4:BA:E1:46:69:D8:64:84:B7:5A:EF:14 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACF7117F99F15A74FFADF0200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d971a8-f6ad-3e6a-84b5-158e463c2fa2.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 397195 IP address blocks: 192.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:17:f9:9f:15:a7:4f:fa:df:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=1c98aed5-b3e8-4e46-863c-26c8aa6f93d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:14:f4:9a:08:0b:e2:15:40:30:45:fe:95: 30:5b:f8:21:c3:9d:4f:c4:4d:3d:93:97:04:1a:9e: 4a:ca:e6:c8:cd:44:90:be:17:6d:ae:8e:84:dd:dd: 5c:53:96:f7:d3:13:40:41:a6:63:71:4a:10:a7:58: 08:39:81:46:ac:99:b8:b0:28:a0:43:b2:5e:d8:01: af:44:19:92:df:1d:eb:7b:26:a5:eb:4f:00:b0:05: a3:65:8c:58:41:cf:f7:6b:2f:ca:2b:58:0c:f5:eb: 5a:ec:65:79:f4:74:04:bd:9b:0f:69:9c:91:db:7a: ba:bf:eb:a3:2f:14:47:b8:fe:05:e8:81:0e:2b:ed: b9:17:0c:8a:89:9e:b0:71:d4:b2:2d:b3:63:1b:22: fb:1a:61:07:76:cd:6c:61:1d:87:bf:69:ac:0f:a3: b6:97:bb:cc:78:f1:d9:5c:99:76:20:4b:d5:a1:d3: 3f:42:23:5f:2a:32:2d:14:0c:71:3e:5d:04:ef:f1: 39:68:5a:ac:7f:54:aa:ce:ea:5e:60:62:29:c2:9d: 2b:5a:ff:8d:ed:50:99:14:57:58:33:75:d1:b3:92: 04:67:9a:3d:5c:87:af:d3:ba:00:1b:ec:35:d6:1f: 1d:82:ec:0a:33:ea:32:ff:29:3d:04:bb:3a:0a:75: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C5:23:24:7A:1E:31:2E:A4:BA:E1:46:69:D8:64:84:B7:5A:EF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d971a8-f6ad-3e6a-84b5-158e463c2fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ef:ab:ac:78:9d:fe:73:5c:c3:e0:3d:b4:55:fb:a2:1f:37: fd:fd:a3:7e:ee:1a:60:f2:82:33:4f:31:90:b3:5c:24:d3:7b: f9:2d:c6:8d:4f:df:3c:66:dc:4d:1f:3d:63:7c:65:ff:8f:b5: bc:33:6e:f1:b4:ab:30:46:88:b8:c6:11:84:0d:e8:38:b9:d6: 56:fe:5b:e7:d0:a0:17:d7:e6:c8:1b:a8:91:0e:2f:2e:8d:82: 71:4a:8d:93:5c:22:fd:39:a1:27:01:b9:41:77:b1:01:47:1b: 30:b5:71:84:6c:d6:95:f3:06:3d:0e:c8:30:77:7e:db:3f:e9: a0:4f:87:3f:f9:8c:2f:d6:47:64:ca:ac:47:de:07:28:9a:50: 10:00:2e:9a:a8:65:4a:62:7e:62:b8:dd:59:c6:f9:a1:7b:16: a6:54:23:85:d0:ed:c2:e0:a0:6c:ce:06:cd:98:19:c0:09:3a: f7:67:75:ca:e8:de:e8:f2:00:85:eb:81:de:e0:37:d0:33:e8: e7:b1:1b:8f:9e:01:4b:51:df:22:96:1c:48:78:88:04:c1:6d: c2:a8:a1:44:38:77:c8:26:b1:09:27:a1:28:95:ec:90:d0:8a: 93:dd:3d:95:e4:60:37:25:ad:4f:4f:6b:75:2c:be:7c:c6:f4: eb:b9:6c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcRf5nxWnT/rfAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MWM5OGFlZDUtYjNlOC00ZTQ2LTg2M2MtMjZjOGFhNmY5M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT8U9JoIC+IVQDBF/pUwW/ghw51PxE09k5cE Gp5KyubIzUSQvhdtro6E3d1cU5b30xNAQaZjcUoQp1gIOYFGrJm4sCigQ7Je2AGv RBmS3x3reyal608AsAWjZYxYQc/3ay/KK1gM9eta7GV59HQEvZsPaZyR23q6v+uj LxRHuP4F6IEOK+25FwyKiZ6wcdSyLbNjGyL7GmEHds1sYR2Hv2msD6O2l7vMePHZ XJl2IEvVodM/QiNfKjItFAxxPl0E7/E5aFqsf1SqzupeYGIpwp0rWv+N7VCZFFdY M3XRs5IEZ5o9XIev07oAG+w11h8dguwKM+oy/yk9BLs6CnVP3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPFIyR6HjEupLrhRmnYZIS3Wu8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjhkOTcxYTgtZjZhZC0z ZTZhLTg0YjUtMTU4ZTQ2M2MyZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXvq6x4nf5zXMPgPbRV+6IfN/39o37uGmDygjNPMZCzXCTTe/ktxo1P 3zxm3E0fPWN8Zf+PtbwzbvG0qzBGiLjGEYQN6Di51lb+W+fQoBfX5sgbqJEOLy6N gnFKjZNcIv05oScBuUF3sQFHGzC1cYRs1pXzBj0OyDB3fts/6aBPhz/5jC/WR2TK rEfeByiaUBAALpqoZUpifmK43VnG+aF7FqZUI4XQ7cLgoGzOBs2YGcAJOvdndcro 3ujyAIXrgd7gN9Az6OexG4+eAUtR3yKWHEh4iATBbcKooUQ4d8gmsQknoSiV7JDQ ipPdPZXkYDclrU9Pa3UsvnzG9Ou5bMk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:45 2025 by rpki-client